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(54) Security method and system for storage subsystem 



(57) According to the present invention, techniques 
for perfoiming security functions in computer storage 
subsystems in order to prevent illegal access by the host 
computers according to logical unit (LU) identity are pro- 
vided. In representative embodiments management ta- 
bles can be used to disclose the Logical Unit in the stor- 
age subsystem to the host computers in accordance 
with the users operational needs. In a specific embodi- 
ment, accessibility to a storage subsystem resource can 
be decided when an Inquiry Command is received, pro- 
viding systems and apparatus wherein there is no fur- 
ther need to repeatedly determine accessibility for sub- 
sequent accesses to the Logk:al Unit. Many such em- 
bodiments can maintain relatively high performance, 
while providing robust security for each LU. 
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Description 

CROSS-REFERENCES TO RELATED 
APPLICATIONS 

[0001 ] This application claims priority from Japanese 
Patent Application Reference No. POO-010115. filed 
January 14, 2000, the entire content of which is incor- 
porated herein by reference for all purposes. 

BACKGROUND OF THE INVENTION 

[0002] The present invention relates generally to stor- 
age subsystems, and in particularto techniques for pro- 
viding access to Logical Units within a storage subsys- 
tem by host computers. 

[0003] Conventionally, security methodologies de- 
signed to prevent an illegal access to a storage subsys- 
tem by host computers depend on the functions of OS 
(Operating System), middleware or application software 
on the host side. 

[0004] On the other hand, as the fiber channel proto- 
col has been standardized in recent years, the various 
standard protocols such as SCSI. ESCON, and TCP/IP 
have become available to be used as the interface be- 
tween the host computers and the storage subsystem, 
resulting in more and more efficient use of the storage 
resources within the storage subsystem. 
[0005] However, because more than one host com- 
puter accesses one storage subsystem, the traditional 
security approaches that depend on operating system 
(OS), middleware, or application software on the host 
computer side, are increasingly recognized as providing 
insufficient security for the resources in modern storage 
subsystems. 

[0006] What is really needed are techniques for per- 
forming security functions in computer storage subsys- 
tems connected to one or more host computers via high 
perfonnance channel interfaces. 

SUMMARY OF THE INVENTION 

[0007] According to the present invention, techniques 
for performing security functions in computer storage 
subsystems ih order to prevent illegal access by the host 
computers according to logical unit (LU) identity are pro- 
vided. In representative embodiments management ta- 
bles can be used to disclose the Logical Unit in the stor- 
age subsystem to the host computers in accordance 
with the users operational needs, in a specific embodi- 
ment, accessibility to a storage subsystem resource can 
be decided when an Inquiry Command is received, pro- 
viding systems and apparatus wherein there is no fur- 
ther need to repeatedly determine accessibility for sub- 
sequent-accesses to the Logical Unit. Many such em- 
bodiments can maintain relatively high perfonnance, 
while providing robust security for each Logical Unit. 
[0008] In a representative embodiment according to 



the present invention, a computer system Is provided. 
The computer system can comprise a variety of compo- 
nents, such as one or more host computers and one or 
more storage subsystems. Each storage subsystem 
5 can comprise one or more logical units, for example. A 
data channel can interconnect the host computers with 
the storage subsystem. The host computers can re- 
quest availability of one or more of the logical unit in one 
of the storage subsystems. Such request can comprise 
10 Identity information corresponding to the particular host 
computer, and a virtual logical unit identifier of the logical 
unit, the availability of which is being requested. In re- 
sponse, the storage subsystem determines whether the 
requesting host computer may permissibly access the 
logical unit requested based upon the virtual logical unit 
identifier and the identity information from the request 
[0009] In specific embodiments of the computer sys- 
tem, identity Information con-esponding to the one or 
more host computers further comprises a dynamically 
assignable identifier. The storage subsystem deter- 
mines a unique identifier for the one or more host com- 
puters from the identity Information In the request; and 
then determines whether the host computer requesting 
access may permissibly access the logical unit based 
upon the virtual logical unit identifier and the unique 
identifier 

[001 OJ In another representative embodiment accord- 
ing to the present invention, a storage subsystem is pro- 
vided. The storage subsystem can comprise a manage- 
ment table that defines relationships among the Infor- 
mation WWN which uniquely identifies the accessing 
host computer, a Logical Unit Number (LUN) in the stor- 
age subsystem which the host computer is permitted to 
access, and a Virtual Logical Unit Number (Virtual LUN) 
which is created from the LUN identifiers in any way of 
numbering in accordance with user's convenience. Spe- 
cific embodiments can also Include a management table 
that defines the linkages between a Management 
Number (S_ID) dynamically assigned by the storage 
subsystem to identify a host computer, and a Worid 
Wide Name (WWN) which uniquely identifies the ac- 
cessing host computer. The management tables can be 
stored in a non volatile memory, for example. Some spe- 
cific embodiments can comprise more than one storage 
unit, and the like. A storage control unit to control the 
readA/vrite operations fromAo said storage units can also 
be part of the storage subsystem. Specific embodiments 
can also include more than one communication port to 
connect to a plurality of host computers, and Logical 
Units corresponding to the storage areas In said storage 
units. 

[0011] In a specific embodiment according to the 
present Invention, in the storage subsystem, the as- 
signed S JD Is used as an identity infomnatlon of the host 
computer instead of the WWN. Such embodiments do 
not require checking the accessibility to the LUN each 
time an I/O operation is executed, resulting in less over- 
head in each I/O operation. Also, users are free to rear- 
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range LUNs In any desired way by making use of the 
Virtual LUNs. 

[0012] In a further representative ennbodiment ac- 
cording to the present invention, the storage subsystem 
retrieves an identity, infomnation, such as the s 
Company_ID, that is common to a certain group of host 
computers^ partially from the WWN. By perfomriing the 
accessibility control on the basis of the group having the 
common identity infonnation, the storage subsystem 
provides the host computer with storage resource for- io 
mat, application, service, and specific pressing valid on- 
ly for that particular host computer group. 
[001 3] N u merous benefits are achieved by way of the 
present invention over conventional techniques. The 
present invention can provide the security functions that is 
prevent illegal accesses by limiting accessibility of Log- 
ical Units by each host computer, without additional 
modification of the current operation of the host compu- 
ter. Many embodiments can also provide the security 
function to prevent illegal accesses by limiting accessi- 20 
ble Logical Units according to each vendor of the host 
computers, without additional modification of the current 
operation on the host computer side. Further, select em- 
bodiments according to the present invention can pro- 
vide permission to access storage resources based on 25 
security functions to host computer groups. Such per- 
mission can be according to vendor, and service can be 
specifically tailored for the group. Specific embodiments 
can provide highly efficient use of the storage resources 
and fast accessibility judgment logic. 30 
[0014] These and other benefits are described 
throughout the present specification. A further under- 
standing of the nature and advantages of the invention 
herein may be realized by reference to the remaining 
portions of the specification and the attached drawings. 35 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0015] 

40 

Fig. 1 Illustrates a representative hardware config- 
uration in which the present invention may be read- 
ily embodied; 

Fig. 2 Illustrates a representative Frame Format and 
Frame Header in a particular embodiment of the 4s 
present invention; 

Fig. 3 illustrates the Frame Fomnat, Frame Header 
and a Data Field in a particular embodiment of the 
present invention; 

Fig. 4 illustrates a representative LOGIN process in so 
a particular embodiment of the present Invention; 
Fig. 5 illustrates a representative Frame format for 
transmitting an Inquiry Command in a particular em- 
bodiment of the present invention; 
Fig. 6 illustrates a representative format for Inquiry ss 
Data used when transfem'ng Inquiry Data respon- 
sive to the Inquiry Command which is shown in Fig. 
5; 



Fig. 7 illustrates a representative sequence for In- 
quiring about the accessibility of a Logical Unit us- 
ing an Inquiry Command in a particular embodiment 
of the present invention; 

Fig. 8 illustrates an outline of a representative 
processing sequence for the LUN Security in a par- 
ticular embodiment of the present invention; 
Fig. 9 illustrates an "LUN Access Management Ta- 
ble" in a particular embodiment of the present in- 
vention; 

Fig. 10 illustrates a format of an incomplete "LUN 
Access Management Table" which will can arise 
when the present Invention is not applied; 
Fig. 11 illustrates the condition shown in Fig. 10; 
Fig. 1 2 illustrates another example in which a format 
of an incomplete "LUN Access Management Table" 
which will can arise when the present invention is 
not applied; 

Fig. 13 illustrates the condition shown in Fig. 12; 
Fig. 14 illustrates a representative format of a "LUN 
Access Management Table" In a particular embod- 
iment of the present Invention; 
Fig. 15 illustrates a representative format of the 
"LUN Access Management Table" in a particular 
embodiment of the present invention; 
Fig. 16 illustrates a representative technique for 
providing LUN Security In a particular embodiment 
of the present invention; 

Fig. 17 Illustrates a representative sequence to cre- 
ate the "LUN Access Management Table" In a par- 
ticular embodiment of the present invention; 
Fig. 1 8 Illustrates a representative sequence to cre- 
ate a "WWN-S_ID Conversion Table" in a particular 
embodiment of the present invention; 
Fig. 19 illustrates a representative fonmat for a 
"WWN-S_ID Conversion Table" in a particular em- 
bodiment of the present Invention; 
Fig. 20A Illustrates a representative sequence to 
judge the accessibility of a LUN as a response to 
an Inquiry Command transferred from a host com- 
puter for providing LUN Security in a particular em- 
bodiment of the present invention; 
Fig. 20B Illustrates a representative sequence to 
judge the accessibility of LUN as a response to an 
Inquiry Command transferred from a host computer 
for providing LUN Security in a particular embodi- 
ment of the present invention; 
Fig. 21 illustrates relations among information in a 
plurality of tables for providing LUN Security in a 
particular embodiment of the present invention; 
Fig. 22 illustrates an example of the WWN format 
in a particular embodiment of the present invention; 
Fig. 23 Illustrates a representative format of a "LUN 
Access Management Table" for controlling access 
based upon a vendor identity in a particular embod- 
iment of the present invention; 
Fig. 24 illustrates an outline of a representative 
processing sequence for providing LUN Security 
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based upon a vendor Identity in a particular embod- 
iment of the present invention; 
Fig. 25 illustrates relations among information in a 
plurality of tables for providing LUN Security based 
upon vendor identity in a particular embodiment of 
the present invention; 

Fig. 26 illustrates a representative fomfiat of a "LUN 
Access Management Table" for controlling access 
based upon a vendor identity in a particular embod- 
iment of the present invention; and 
Fig. 27 illustrates a representative technique for 
providing LUN Security according to vendor identity 
in a particular embodiment of the present invention. 

DESCRIPTION OF THE SPECIFIC EMBODIMENTS 

£001 6] The present invention provides techniques tor 
perfomiing security functions in computer storage sub- 
systems in order to prevent illegal access by the host 
computers according to logical unit (LU) identity, in rep- 
resentative embodiments management tables can be 
used to disclose the Logical Unit in the storage subsys- 
tem to the host computers in accordance with the users 
operational needs. In a specific embodiment, accessi- 
bility to a storage subsystem resource can be decided 
when an Inquiry Command is received, providing sys- 
tems and apparatus wherein there is no further need to 
repeatedly determine accessibility for subsequent ac- 
cesses to the Logical Unit. Many such embodiments can 
maintain relatively high performance, while providing ro- 
bust security for each Logical Unit. 
[0017] According to one example of storage subsys- 
tem access security, before the host computer is started, 
the storage subsystem establishes a table which man- 
ages the combination of an accessible Logical Unit in 
the storage subsystem and N_Port_Name. The 
N_Port_Name uniquely identifies the host computer 
which may access the storage subsystem. When the 
host computer is started, it issues a SCSI command 
consisting of an information unit called a frame which is 
specified by the fiber channel protocols. The storage 
subsystem checks details each time this SCSI com- 
mand Is received and extracts the N_Port_Name which 
identifies the accessing host computer. 
[001 8] The extiBcted N_PbrtlName is searched for in 
a combination table of the Logical Units and said 
N_Port_Names, and when an expected entry exists, the 
host computer is permitted to access the Logical Unit. 
Otherwise, when no associated entry exists, the host 
computer is refused access to the Logical Unit. For a 
detailed description of one example of a security means 
for a storage subsystem resource (the Logical Unit), ref- 
erence may be had to a Japanese unexamined patent 
application, publication 10-333839, the entire contents 
of which are incorporated herein by reference for all pur- 
poses. 

[0019] The present invention is explained with refer- 
ence to specific embodiments employing a fiber channel 



as an interface protocol between a storage subsystem 
and host computers, and the SCSI command set as a 
command interface operational under the interface pro- 
tocol, as examples. However, the application of the 

s present invention is not limited to the combination of the 
fiber channel and SCSI command set Any protocol 
which provides similar function and structure of LOGIN, 
Inquiry, and the like may apply techniques according to 
the present invention. 

10 [0020] In a representative embodiment according to 
the present invention, a fiber channel protocol is em- 
ployed as an interface between storage subsystem and 
one or more host computers. Because the fiber channel 
is a relatively new interface protocol, details of a repre- 

15 sentative embodiment employing fiber channel protocol 
will be outlined herein. 

[0021] The fiber channel protocol utilizes serial type 
of data transfer and can make use of the band width of 
the transmission medium effectively because of the 

20 asynchronous transfer method. The fiber channel 
doesnl have its own command set and instead adopts 
the command sets such as the SCSI, ESCON, HIP PI, 
IPI-3. IP and so on, as its command set infrastructure. 
Therefore, it is possible to inherit the traditional protocol 

25 resources and to realize faster, more reliable, and ver- 
satile data transfer. 

[0022] The fiber channel is an interface having char- 
acteristics of both of so called Channel Interface and 
Network Protocols. In the fiber channel, once the trans- 
it) ferring unit and receiving unit are fixed, high speed data 
transferring is available with the least transferring delay. 
This feature can provide a desirable data transfer rates 
in specific embodiments using such channel interfaces. 
[0023] Also, any unit who wants communication can 
35 enter into a communication over the network on any op- 
tional occasion and can initiate the communication by 
exchanging agreement information about communica- 
tion conditions with another unit. These are some of the 
characteristics of such networks. The procedure to 
40 reach agreement about the communication condition 
with another unit, as described above, is specifically 
called LOGIN. 

[0024] A unit that interfaces with the fiber channel is* 
called a node and a physical entrance of the node, that 

45 is, the actual interface, is called a port. A node can have 
one or more ports. The number of the ports which can 
participate simultaneously in the whole system of the fib- 
er channel is defined by the number of 24-bit addresses, 
i.e. about 16,770,000 maximum in a particular embodi- 

50 ment. The hardware whrch mediates these connections 
is called fabric. Actually, however, both transferring and 
receiving ports are not required to be aware of the fabric, 
they are need only operate according to the Information 
exchanged with each other 

S5 [0025] The identifier, which is unique alt over the 
world, is allocated based on a consistent rule by the 
standardization group (IEEE), and is maintained in each 
node and port. This identifier is equivalent to the MAC 
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address traditionaHy used in the TCP/IP and so on and 
the address infonnation rs fixed by hardware. This ad- 
dress comprises of two components of N_Port_Name 
and Node_Name, and each has a size of 8 bytes re- 
spectively, in a representative embodiment. The 
N_Port_Name is a specific value (the hardware ad- 
dress) corresponding to each port and the Node_Name 
is also a specific value (the hardware address) corre- 
sponding to each node. Because each of them is an 
unique value all over the world and can address a port 
or a node uniquely, it is called WWN (World Wide 
Name). In specific embodiments of the present inven- 
tion, when the WWN is referred to, it means the 
N_Port_Name. 

[0026] In the fiber channel, a communication is exe- 
cuted by exchanging a signal level information called an 
Ordered Set and a logical information having fixed for- 
mat called a frame. Fig. 2 shows a representative struc- 
ture of a frame. A frame block 201 comprises of, an SOF 
(Start of Frame) 202 of 4 bytes, for example, which in- 
dicates a start of the frame, a Frame Header 203 of 24 
bytes, for example, which controls Link Operation and 
characterizes the frame, a Data Field 204 which con- 
tains the actual data to be transferred, a Cyclk: Redun- 
dancy Code (ORG) 205 of 4 bytes, for example, and an 
EOF (End of Frame) 206 of 4 bytes, for example, which 
indk^ates the end of the frame. The length of the Data 
Field 204 is variable between 0-2 112 bytes, for example. 
[0027] Next, the contents of the Frame Header are ex- 
plained. Table 207 illustrates the structure of a repre- 
sentative Frame Header. Here, an S_ID 208, which 
comprises the 0 bit to 23 bit area of the first word of the 
detailed structure 207 in the Frame Header 203, is ex- 
plained. The S_ID (Source ID) 208 Is the address of 3 
bytes, for example, that Identify the port which transfers 
the frame, and has a value effective within all frames 
sent and received. This S_ID is a dynamically assigned 
value and is specified to be allocated by the fabric during 
the initialization procedure in the case of FC_PH, which 
is one of the standard sets of the fiber channel. The al- 
located value depends on the N_Port_Name or 
Node_Name which each port has. 
[0028] Next, the LOGIN procedure, with which the 
transferring unit and receiving unit exchange informa- 
tion about the coimmuhication with each other based 6n~^ 
the fiber channel protocol, is explained. Fig. 3 shows the 
detailed structure of a representative Data Field 303 of 
a PLOGI frame. The structures of the frame and Frame 
Header are the same as that of Fig. 2. Among the Data 
Field 303 of the PLOGI frame, the 8-byte area from the 
21st byte to the 29th byte stores the N_Port_Name 307 
and the 8-byte area from the 30th byte to the 38th byte 
stores the Node_Name 308, for example. 
[0029] Fig. 4 shows an exchange of the information 
between a transferring unit (LOGIN requesting unit) 401 
and a receiving unit (LOGIN receiving unit) 402. Several 
kinds of LOGIN procedures exist in the fiber channel, 
however, the Class 3 LOGIN procedure is described 



here as an example, 

[0030] A LOGIN requesting unit transfers the PLOGI 
frame 403 to a LOGIN receiving unit. In this frame are 
included the N_Port_Name, Node_Name, S_ID and the 
5 other infonnation belonging to the LOGIN requesting 
unit. The LOGIN receiving unit transfers a frame which 
is called ACC 404 to the LOGIN requesting unit, if the 
receiving unit accepts the LOGIN after checking the in- 
formation contained In the frame. On the other hand, if 
the LOGIN is rejected, the receiving unit transfers a 
frame which is called LS_RJT 405 to the LOGIN re- 
questing unit. 

[0031] When the LOGIN requesting unit receives the 
ACC frame as a response to the PLOGI frame trans- 
ferred by itself, it understands that the LOGIN has suc- 
ceeded and rt is placed In the status ready for initiating 
the I/O process for the data transfer and so on. On the 
other hand, when it receives LS_RJT, the LOGIN has 
not succeeded and the LOGIN requesting unit may not 
proceed to I/O process with the LOGIN receiving unit. 
Here, the LOGIN process of Class 3 is explained, but 
regarding the other LOGIN processes, it is similar in that 
the N_Port_Name, Node_Name and S_ID are con- 
tained in the information can be transferred to the 
LOGIN receiving unit from the LOGIN requesting unit. 
[0032] Next, an Inquiry Command, which is supported 
as a standard command In the SCSI command set, is 
explained. Preceding the initiation of I/O process, the 
Inquiry Command is used to inquire the status of a Log- 
ical Unit to be an object of the succeeding I/O process, 
such as installation status or ready status. 
[0033] Fig. 5 shows a detailed diagram of a represent- 
ative structure of the Data Field used when the Inquiry 
Command specified by the SCSI standard is transferred 
using a frame specified by the fiber channel standard. 
The structures of the frame and Frame Header are sim- 
ilar to those shown in Fig. 2, however, included in the 
Data Field is the S_ID 505 for the LOGIN requesting unit 
stored by the LOGIN receiving unit during the preceding 
PLOGI sequence before this frame is transferred. 
[0034] In the data field 503, there is an area called 
FCP_LUN 507, FCP_CNTL 508, FCP CDB 509, and 
FCP_DL 510 as shown in the FCP_CMND fomnat 506. 
FCP_LUN^07, and FCP_CDB 509 wiH be described 
hereafter. The Ideritifier of the logical vblurne is con- 
tained in FCP_LUN 507. The logical volume is related 
to a port that receives a frame, and also, the status of 
such logical volume is requested to be sent to a node 
which sends a frame. (Here, logical volume is a virtual 
area which Is divided in plural areas, and is given num- 
bers (In contrast to physical volume).) This identifier is 
called LUN (Logical Unit Numbers). In case if SCSI com- 
mand set Is utilized, a command information called 
"command description block (CDB)" is contained in 
FCP_CDB 509. The Inquiry command information of 
SCSI will be contained in FCP_ CDB 509, and will be 
transferred (together with FCP_LUN 507) to a node that 
receives a frame. 
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[0035] Next, the information transferred, as a re- 
sponse to the Inquiry Command, to the frame transmit- 
ting unit, from the unit which has received the Inquiry 
Command is explained. This information is called In- 
quiry Data. Fig. 6 shows a portion of the Inquiry Data. 
Here, two of the Inquiry Data 601 , the Qualifier 602 and 
Device Type Code 603 are explained. The Qualifier (Pe- 
ripheral Qualifier) 602 is 3-bit, for example, information 
block which sets the current status of the specified Log- 
ical Unit. The Logical Unit status 604 indicates the status 
of the Logical Unit shown by the bit pattern of this Qual- 
ifier. The code 000 (binary) 605 indicates that the unit 
connected as the logical unit is an input/Output device 
belonging to the type of unit defined by the Device Type 
Code field 603. t-towever, even if this code is set, this 
unit is not necessarily usable, that is. ready to use. 
[0036] However, if the specified Logical Unit can be 
used, a code 605 of 000 is set. The code 001 (binary) 
606 indicates that the unit being connected as a logical 
unit is an Input/Output device belonging to the type of 
unit defined by the Device Type Code field 603. Howev- 
er, no actual Input/Output device is connected to the log- 
ical unit. An example of this case is that although a CD- 
ROM drive is installed but the CD-ROM medium is not 
inserted into the drive. 

[0037] The code Oil (binary) 607 indicates that the 
specified Logical Unit is not supported. Therefore, no 
device is assigned to the specified Logical Unit. When 
this code is set, 1F (hexadecimal) is always set in the 
Device Type Code field 603. 

[0038] Device Type Code (Peripheral Device Type) 
603 comprises 5-bits information, for example, which in- 
dicates the type of the Input/Output device which is ac- 
tually allocated to the specified Logical Unit. The Code 
608 is the code of the hexadecimal number which cor- 
responds to each Device Type 609. If the Code 1 F (hex- 
adecimal) 610 which indicates an undefined or not con- 
nected device is set among the infomiation included in 
608, the device inquired by the Inquiry Command trans- 
ferring unit is undefined or not connected and therefore, 
the logical unit will not be used by the transferring unit. 
[0039] Fig. 7 shows a representative procedure to 
query a Logical Unit using this Inquiry Command. The 
host computer 701 which attempts to access a Logical 
Unit transfers a frame 703 storing the Inquiry Commarici 
to the storage subsystem 702 which has the Logical Unit 
to be accessed. 

[0040] In this frame, contained are the S_ID of the 
host computer which has been assigned in the PLOGI 
sequence and the LUN which is the Identifier of the Log- 
ical Unit to be queried. Here, as for the LUN, it may be 
also set in the format of the Inquiry Command informa- 
tion in the FCP_CDB in addition to the FCP_LUN area. 
The result is the same in either case, however, in this 
example embodiment, the value of LUN stored in the 
FCP_LUN 507 is assumed to be used. 
[0041] The storage subsystem 702 which received 
the frame containing the Inquiry Command, prepares 



the required Inquiry Data for the received inquiry and 
transfers a frame 704 containing the prepared Inquiry 
Data to the host computer. The frame storing the Inquiry 
Data at this time is called FCP.DATA. When the host 

s computer received the frame 704 having either the 
Qualifier 000 (binary) or Device Type in the range of 
00-09 (hexadecimal) set by the storage subsystem re- 
garding the queried Logical Unit, it may Issue I/O Com- 
mands thereafter to the Logical Unit 

10 [0042] On the other hand, if the host computer re- 
ceived a frame 705 having the Qualifier 001 (binary) or 
Oil (binary) and Device Type IF (hexadecimal) set by 
the storage subsystem, it recognizes that no I/O opera- 
tion may be issued thereafter to the Logical Unit. 

15 [0043] From the above. It is understood that a storage 
subsystem can manage, by itself, whether to accept or 
reject each access from a host computer to a specified 
Logical Unit of the storage subsystem by controlling the 
Qualifier and Device Type Code to be stored in the In- 

20 quiry Data. Next, details of the flow of processing in a 
representative embodiment according to the present in- 
vention will be explained. 

[0044] Fig. 1 shows a subsystem configuration in 
which the present invention may be embodied. This sub- 

25 system is called storage subsystem 101. The storage 
subsystem 1 01 has ports 1 02-1 04 for the fiber channel 
interface and it is physically connected with host com- 
puters 1 05-1 07 via the fiber channel interface. The host 
computers 1 05-1 07, also, have ports 1 08-1 1 2 for the f ib- 

30 er channel interface, and the host computers 105-107 
and a storage subsystem 1 01 can communicate with 
each other according to the fiber channel protocol. The 
host computer may have more than one fiber channel 
ports like 1 05 or 1 06, or may have only one fiberchannel 

35 port like 107. 

[0045] Although; to connect a storage subsystem 1 01 
and the host computers 1 05-1 07, there exist some con- 
nection forms (Topology) of the fiber channel Interface 
such as Point-to-Point connection. Arbitrated Loop Con- 

40 nection and Fabric Connection, the present Invention 
will be explained simply referring to as the word fiber 
channel' 113, because the present invention does not 
depend on a specific Topology. 
[0046] First, a storage subsystem 1 01 has mbroproc- 

4s essdrs 1 1 4 to perform various calculation and process- 
ing, more than two storage unit groups 115, a storage 
control unit 1 1 6 to control the read/write operation fronn/ 
to these storage units, a bus 1 1 7 to connect the storage 
unit groups 115 and the storage control unit 116. Also, 

50 the storage subsystem 101 has a memory unit 118 to 
be used as the work area of various calculation and 
processing and a non volatile memory unit 119 which 
preserves various management inf omriation or manage- 
ment tables and so on. Moreover, the subsystem has a 

S5 cache memory unit 120 to enhance the response time 
to the host computers. Also, the storage subsystem 1 01 
has a communbation control unit 121 and is connected 
with a maintenance terminal unit 123 via a communica- 
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tion line 122. 

[0047] The maintenance terminal unit 123 has a mi- 
croprocessor 124 and an input unit 125 as an interface 
with users and a display unit 126 to display the results 
of processing. The users can build some tables defined 
by this embodiment utilizing this input unit 125. 
[0048] Fig. 8 shows an outline of processing flow In a 
specific embodiment according to the present invention. 
Fig. 8 illustrates a step 801 , in which the user creates 
an "LUN Access Management Table" which includes the 
linkage information combining an LUN (Logical Unit 
Number) to identify an LU that exists in the storage sub- 
system, the WWN (N_Port_Name) allocated to the host 
computer which may access the LUN, and the Virtual 
LUN to decide how to show the LUN to the host compu- 
ter using the input unit 125 within the maintenance ter- 
minal. This table is maintained in the non volatile mem- 
ory 119, for example, in the storage subsystem. This Vir- 
tual LUN in this table is disclosed to each host computer 
The WWN of each host computer Is Icnown. 
[0049] Next, in step 802. when each host computer 
initiates a LOGIN procedure to the storage subsystem 
according to the fiber channel protocol, the storage sub- 
system extracts the WWN and S_ID allocated to the 
host computer from the PLOGI frame, and creates the 
"WWN-S_ID Conversion Table," which contains the 
combination of the WWN and SJD, and stores this table 
In the non volatile memory 119. The storage subsystem 
does this work for all received PLOGI frames. 
[0050] Next, in step 803, the storage subsystem re- 
ceives a frame which contains the Inquiry Command 
transferred by the host computer to get the status of the 
Logical Unit in the storage subsystem. The storage sub- 
system that received this frame extracts the S_ID from 
the header of the frame and the LUN whk^h is to be a 
target of the Inquiry Command from the Data Field. 
Next, the storage subsystem searches the "WWN-S_ID 
Conversion Table" using the SJD as a key and obtains 
the WWN corresponding to this S_ID as a key. 
[0051] Next, in step 804. the storage subsystem 
searches the "LUN Access Management Table" using 
the WWN obtained as a key and obtains the Virtual LUN 
corresponding to the LUN that is a target of the Inquiry 
Command from the "LUN Access Management Table". 
The reason why the storage subsystem obtains the LUN 
that is a target of the Inquiry Command as a Virtual LUN 
is that only the Virtual LUN is disclosed to the host com- 
puter. 

[0052] Next, in step 805, storage subsystem makes a 
judgment whether the Virtual LUN con'espondingtothe 
WWN Is actually obtained in the step 804. When It has 
been obtained, i.e. the Virtual LUN corresponding to the 
WWN does exist in the "LUN Access Management Ta- 
ble", the host computer is permitted to access to the Vir- 
tual LUN. When the required Virtual LUN doesn't exist 
in the Table, the host computer is refused access to the 
LUN. 

[0053] If the access to the Virtual LUN by the host 



computer is pemnitted in step 805, then, in step 806, the 
storage subsystem sends the Inquiry Data which has 
the setting that the target LU is Installed (i.e. accessible) 
as a response to the Inquiry Command. On the other 

5 hand, if the access to the Virtual LUN specified by the 
host computer is refused, then, in step 807, the storage 
subsystem sends the Inquiry Data, which has the setting 
that the target LU is not installed (i.e. not accessible), 
as a response to the Inquiry Command. The host com- 

10 puter which received the Inquiry data analyzes the 
frame. 

[0054] After the host computer has recognized that 
the access to the Virtual LUN in the storage subsystem 
was pemnitted as a result of the analysis, the host com- 

15 puter may issue Commands (I/O Requests) continuous- 
ly to the Virtual LUN. Furthermore, as shown in step 808, 
the storage subsystem can continue to receive Com- 
mands without checking the accessibility of the LU so 
long as the LOGIN from the host computer is kept valid. 

20 [0055] On the other hand, the host computer that rec- 
ognized that the access to the LUN was refused, does 
not access the corresponding LU so long as the LOGIN 
from the host computer Is kept valid. Hereinafter, the 
above-mentioned technique whbh controls the acces- 

25 sibility of the specified LU in a storage subsystem by the 
host computer is called "LUN Security" for convenience. 
Next, the details about each of the above-mentioned 
procedure are explained. 

[0056] First, the creation of the "LUN Access Manage- 
30 ment Table" of the above procedure Is explained. The 
LUN Security in specific embodiments according to the 
present invention is managed at each port of the storage 
subsystem so that the host computer accesses the LU 
in the storage subsystem through the port of this storage 
35 subsystem. In such specific embodiments, a technique 
in which a table 901, shown in Fig. 9, is established. 
Table 901 defines the correspondence of the WWN, 
which is the information to Identify a host computer, 
uniquely to the LUN (Logical Unit Number) in the storage 
40 subsystem permitted to be accessed by the host com- 
puter. 

[0057] However, In an operational environment In 
which hubs or switches for the fiber channel exist be- 
tween the host computers and the storage subsystem. 

^ table 901 can be supplemented by further techniques 
according to the present invention, as explained below. 
{0058] Table 901 directly allocates the LU in the stor- 
age subsystem according to the LUN (Logical Unit 
Number), which is an identifier of the LU to the WWN of 

50 host computer. In the representative example Illustrated 
in Fig. 9, a host computer WWN 902 is permitted to ac- 
cess only LUO to LU2, a host computer WWN903 is per- 
mitted to access only LUs3, 4, and 7 and a host compu- 
ter WWN904 is pemnitted to access only LUs 5, and 6. 

55 For example, the LUO to LU2 may not be accessed by 
the host computers other than that of the WWN902, and 
therefore, the LUN Security is realized. However, when 
the access to the LUO was rejected, the majority of mod- 
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ern host computers do not inquire any further Into the 
accessibility of the LUs belonging to the same series as 
LUO. For example, according to the SCSI1 or SCSI2 
standard, one series comprises of 8 LUs, and therefore 
LUO to LU7 comprise one series. 
[0059] Then, so long as measures like that in Table 
901 are used, the host computer 903 or 904 happens 
not to inquire the LUNs even though these LUNs are 
listed in the table 901 as permitted to be accessed by 
these host computers, because they could not access 
the LUO. This situation is quite serious for storage sub- 
systems such as the disk array subsystem that can pro- 
vide abundant storage resources, because the coeffi- 
cient of utilization in such disk array subsystems will be 
decreased. 

[0060] if the access to the LUO by the host computer 
903 and 904 is permitted in order to avokt this problem, 
then the security of the LUO is not assured. Even if the 
security problem is not considered further, If the host 
computer 903 and 904 have different operating sys- 
tems, and therefore have different types of storage for- 
mats, then, the LUO cannot be easily shared by both 
host computers. 

[0061] On the other hand, In the Fig. 10, the host com- 
puters having WWNs 1 002-1 004, whk:h inquire all LUNs 
about their existence even if the LUO does not exist un- 
der the port to which the host computers are connected, 
are supposed to exist. In the representative example 
embodiment Illustrated by Fig. 10, a host computer 
WWN1002 Is permitted to access only LUsO, 1. and 7, 
a host computer WWN1 003 Is permitted to access only 
LUs3. 5, and 6 and a host computer WWN 1004 is per- 
mitted to access only LUs2 and 4. 
[0062] Fig. 11 shows the representative embodiment 
of Fig. 1 0 more visually. The host computers 1 1 02-1 1 04 
correspond to the host computers WWNs1002 to 1004 
in Fig. 1 0. The host computers 1 1 02-1 1 04 are connected 
to the same port 1 1 08 of the storage subsystem through 
hubs and switches 1105 for the fiber channel. In such 
an operational environment, If the LUNs are defined un- 
systematlcally or the LAN different from the former ones 
are assigned to the host computers 1102-1104, LUs un- 
der the port appear as if they are scattered and broken 
in fragments like LU group 1107. This condition can 
arise because storage subsystems like storage subsys- 
tem 1101 disclose the LUNs in the storage subsystem 
as they are physically arranged, having no flexible way 
to disclose the LUNs. Disk management problems can 
be solved using the techniques according to the present 
invention as described herein below. 
[0063] Recently, some host computers can accept 
more than 8 LUs defined under a port within the storage 
subsystem. The problems Inevitable when the LUN Se- 
curity is applied to a system containing both types of the 
host computers such as new type of host computers ac- 
cepting more than 8 LUs and conventional types of host 
computers only accepting maximum of 8 LUs, LUO to 
LU7 are described below. 



[0064] The description will be applied to the repre- 
sentative example embodiment illustrated by Fig. 12, in 
which the host computers corresponding to WWN 1202 
and WWN 1204 have a mechanism with which to inquire 
s each LU about its existence even if no LUO exists under 
the associated port of the connected storage subsys- 
tem. Further, such host computers can recognize up to 
1 6 LUs under a single port of the connected storage sub- 
system. 

10 [0065] Suppose that in a particular embodiment, the 
host computer having WWN 1203 can query each LU 
about its existence even if LUO does not exist under the 
port of the connected storage subsystem, however the 
LUs supported by the host computer is up to 8 ranging 

15 from LUO to LU7. As shown in the Table 1201 , the host 
computer having WWN 1202 is permitted to access LUs 
in the range of LUO to LUS, the host computer having 
WWN1203 Is pemiitted to access LUs in the range of 
LU6 to LU 1 0, and the host computer having WWN1 204 

20 Is permitted to access LUs In the range of LU11 toLU15. 
Fig. 13 Illustrates a representative embodiment In which 
this condition exists. 

[0066] Fig. 13 illustrates representative host comput- 
ers 1302-1304 that correspond to the host computers 

25 having WWN1 202-1 204 illustrated in Fig. 12. The host 
computers 1302-1304 are connected to the same port, 
port 1306 of the storage subsystem, through the hubs 
and switches for the fiber channel. In this environment, 
when LUs In the storage subsystem, such as LU group 

30 1308, are assigned to each of host computers 
1 302-1 304, the host computer A 1 302 can recognize on- 
ly the LUsO to LU5 In the LU group 1308 as pemnissible 
to access, and the host computer C 1304 can recognize 
only the LU11 to LU15 in the LU group 1308 as permis- 

33 sible to access, and therefore, the purpose of the LUN 
Security is satisfied so far. However because the host 
computer B 1 303 supports only up to 8 LUs ranging from 
LUO to LU7 under a port, it can inquire only within the 
range of LU group 1307. Therefore, in this case, the host 

40 computer B 1 303 can access actually only LU6 and LU7, 
even if LUS to LU1 0 are set to be accessible to the host 
computer in table 1201 . This problem Is also caused by 
directly disclosing the LUs in the storage subsystem as 
they are arranged. 

45 [0067] In a representative embodiment according to 
the present invention, a "LUN Access Management Ta- 
ble"* 1401 is defined as illustrated in Fig. 14. The Table 
1401 defines, for each port in the storage subsystem, a 
combination of an LUN in the storage subsystem, a Vir- 

50 tual LUN created by renumbering the LUN according on 
the user's convenience, for example, and a WWN of the 
host computer likely to access the Virtual LUN. Thus, 
table 1401 Is In contrast to the Table 901 in Fig. 9, the 
Table 1001 In Fig. 10, or the Table 1201 in Fig. 12 in 

55 which relationships are depicted between physical 
LUNs and the WWNs. 

[0068] In table 1401, the user can provide a Virtual 
LUN with correspondence to any number of LUNs using 
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any of a plurality of assigning techniques, such as num- 
bering or the like. As a result, the storage subsystem 
which defines this "LUN Access Management Table" 
1401 can disclose any LUNs depending on the user's 
convenience, for example, to the host computers. In 
such specific embodiments, because the LUN that is 
permitted to be accessed by a host computer is not the 
real LUN 141 7 but the Virtual LUN 1416. It is no longer 
necessary to worry about the fragmentation of the LUN 
values and existence of LUO. Thus, specific embodi- 
ments can provide users with optimum and flexible LUN 
combinations for meeting their needs. 
[0069] In Fig. 14, the host computer having 
WWN1402 is pennitted to access the real LUNsO-3 
through the Virtual LUNsO-3. In the same way, the host 
computers having WWNs1403-1414, are permitted to 
access the real LUNs listed in 1417 through the Virtual 
LUNs listed in 1416, respectively. Accordingly, each 
host computer can process LUs other than LUO In a sub- 
stantially similar way as that for LUNO. 
[0070] A characteristic result caused by using this 
"LUN Access Management Table" 1 401 is that the host 
computers having WWNsI 402- 1405 are capable of ac- 
cessing the different LUNs resulting in effective use of 
the storage resource. Further, exclusive access security 
can be provided between these host computers, even 
though each host computer looks as If it is accessing 
the LUO under the connected port. 
[0071] Thedetailsof the numbering of the Virtual LUN 
corresponding to the actual LUN are shown. The num- 
bering schema that the most users are likely to use Is to 
increment the value by 1 for each WWN starting from 
LUO as shown In WWNs1 402- 1404, taking the con-e- 
spondence to the traditional SCSI standard in consider- 
ation. 

[0072] However, in some applications, it may be pre- 
ferred to use only odd numbers or even numbers of the 
Virtual LUNs like those in WWN1407 or WWN1408. In 
those cases, the host computer having WWN 1407 or 
WWN 1408 is actually pemriltted to access LUs with the 
consecutive numbers, LUsSO to 34 or LUs35 to 38, re- 
spectively. Also, if a host computer can access any LUN 
without accessing LUO, like WWN1409, it is enough to 
permit access to only the Virtual LUN corresponding to 
the requested LUN. Also, the correspondence like 
WWN1410 and WWN1411 is convenient when two or 
more different host computers are to be grouped option- 
ally. Additionally, in the cases of WWN1412 and 
WWN 141 3, both host computers share the same real 
LUNs and receive the same information, even though 
they look as if they are penmltted to access the different 
LUNs. This can provide useful operations in specific em- 
bodiments. 

[0073] Moreover, in the case of a storage subsystem 
comprising of a RAID made by arrayed disk groups, it 
is possible to assign one LU to each different RAID 
group and to increase the number of storage units (mag- 
netic disk drives) which contribute to the I/O perform- 



ance. The WWN1414 in Fig. 14 Illustrates this tech- 
nique. 

[0074] The effectiveness of assigning a Virtual LUN 
to a real LUN using the "LUN Access Management Ta- 

5 ble" has been explained herein above with reference to 
representative specific embodiments according to the 
present invention. Fig. 16 shows specifk: embodiments 
employing such techniques according to the invention. 
The corresponding management table is shown in Fig. 

10 15. 

[0075] The real LU group 1 504 allocated to each host 
computer In the table 1501 has a substantially unor- 
dered arrangement as illustrated by 1608 in Fig. 16. 
However, by replacing these actual LUs with of the Vir- 

t5 tual LU group 1 503 in the table 1 501 , each host compu- 
ter may have the LUs disclosed as illustrated by 1 607, 
Independent of the real arrangements 1608 in the stor* 
age subsystem 1 601 . Accordingly, the flexible operation 
of the storage subsystem resource becomes possible. 

20 [0076] The "LUN Access Management Table" 1401 
and 1501 of the present invention is maintained In the 
non volatile memory in the storage subsystem after it is 
defined to the ports of the storage subsystem as shown 
in steps 1701 to 1703 in Rg. 17. Residing in the non 

2s volatile memory, the content of this table is not k>st even 
if the electric power Is removed from the storage sub- 
system. 

[0077] Next, the processing when a storage subsys- 
tem receives a LOGIN procedure from a host computer 

30 Is explained. In a specific embodiment, through a series 
of LOGIN processing steps, the S_ID, which uniquely 
identifies the host computer after the LOGIN procedure, 
is linked to the WWN, which uniquely identifies the host 
computer. When the host computer is initiated, the stor- 

35 age subsystem receives a PLOGI frame, as illustrated 
by step 1801 In Fig. 18. 

[0078] The storage subsystem that has received the 
PLOGI frame fetches the SJD of the host computer 
from the Frame Header In step 1802. Then, the storage 

40 subsystem fetches the WWN (N_Port_Name) of the 
host computer from the Data Field In step 1 803. Next, 
the storage subsystem registers the received WWN and 
S_ID pair Into the "WWN-SJD Conversion Table" 1901 
in step 1804 of Fig. 19. This table is maintained in the 

45 non Volatile memory in step 1805. The "~WWN-S_ID 
Conversion Table" 1 901 is prepared for each port of the 
storage subsystem. 

[0079] According to this technique, when a Command 
is transferred from a host computer having the WWN 

50 registered In the table thereafter, the storage subsystem 
extracts the S_ID from the received Frame Header, and 
then searches the "WWN-S_ID Conversion Table" 1 901 
for the WWN allocated to the host computer. 
[0080] After the "WWN-SJD Conversion Table" is 

55 stored In the non volatile memory, the storage subsys- 
tem transfers an ACC frame in step 1 806 in order to no- 
tify host computer that the LOGIN has been accepted. 
After the host computer receives the ACC frame from 
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the storage subsystem, it can issue an Inquiry Conn- 
mand to the storage subsystem. 
[0081 ] Next, a procedure used by the storage subsys- 
tem to receive the Inquiry Command from the host com- 
puter and the responses made tjy the storage subsys- 
tem in order to provide security are explained. Fig. 20A 
and fig. 20B show the flow representative processing 
and Fig. 21 shows the referencing relation of each tabfe 
and the parameter used in the flow of such processing. 
In step 2001 in Fig. 20A, the storage subsystem re- 
ceives the FCP_CMND frame specified by the fiber 
channel from the host computer. Then, the storage sub- 
system analyzes the contents of the Data Frame of the 
FCP^CMND in step 2002. 

[0082] Next, the storage subsystem checks whether 
the content of the FCP_CMND is an Inquiry Command 
in step 2003. In the case that it is not the Inquiry Com- 
mand, the storage subsystem executes the appropriate 
processing corresponding to thecommand in step 2004. 
Otherwise, in the case of the I nquiry Command, the stor- 
age subsystem extracts the S_ID of the host computer 
from the header of the FCP_CMND Frame in step 2005. 
The targeted LUN is extracted from the FCP_LUN in Da- 
ta Field of the FCP.CMND Frame in step 2006. Then, 
the storage subsystem searches the "VVWNS_ID Con- 
version Table" 1901 in Fig. 1 9 for the WWN correspond- 
ing to this S JD using the S JD as a key in step 2007. 
The operational flow described is illustrated by the ref- 
erencing operations of 2101 and steps 2102 and 2103 
in Fig. 21. 

[0083] Next, the storage subsystem attempts to ac- 
quire the Virtual LUN information which it is pennitted to 
access using this WWN in step 2008. Then, it judges 
whether the LUN obtained from the Inquiry Command 
from the host computer having the WWN, is registered 
as a Virtual LUN permitted to access in the "LUN Access 
Management Table", In step 2009. The operational flow 
described herein is illustrated by referencing operation 
of 2104 and 2105 in Fig. 21 . 

[0084] If the LUN obtained in step 2006 is registered 
as the Virtual LUN in the entry of the "LUN Access Man- 
agement Table," then the host computer is permitted to 
access the Virtual LUN. Accordingly, the storage sub- 
system sets 000 (binary) in the Qualifier and Device 
Type Code corresponding to the storage subsystem In 
the Device Type in the Inquiry Data for the response to 
the host computer in step 2010. 
[0085] Othenwise, if the LUN obtained In step 2006 is 
not registered as the Virtual LUN in the entries of the 
"LUN Access Management Table," then, the host com- 
puter's requested access to the Virtual LUN is rejected. 
Accordingly, the storage subsystem sets '001' or '011' 
(binary) in the Qualifier and Device Type Code 1 F (hex- 
adecimal) in the Device Type in the Inquiry Data for the 
response to the host computer in step 2010. 
[0086] The storage subsystem sets above-mentioned 
Inquiry Data for response to the Inquiry Command in the 
FCP_DATA Frame in step 2012 and transfers it to the 



host computer. Next, the storage subsystem transfers 
the FCP_RSP Frame which notifies the host computer 
that the response to the Inquiry Command has complet- 
ed in step 2013. 
s [0087] Following the steps 201 0 and 2012 in Fig. 20A, 
the host computer which received the FCP_DATA con- 
taining the Inquiry Data from the storage subsystem, un- 
derstands that the LUN is accessible, and may continue 
to access the LUN without inquiring about the accessi- 
10 bility of the Virtual LUN any more. The LUN accessed 
by the host computer is actually the LUN of step 2106 
in Fig. 21. The reference operation in step 2106 Is the 
internal reference work In the storage subsystem and 
the host computer is not required to worry about it. On 
IS the other hand, the host computer which received the 
FCP_DATA containing Inquiry Data from the storage 
subsystem following steps 2011 and 2012 in Fig. 20A, 
understands that the LUN Is not accessible, and there- 
after will not access the Virtual LUN also, without inquir- 
ing about the accessibility of it any more. 
[0088] According to a particular embodiment of the 
present invention, the host computer queries the LUN 
to detennlne the LUN's accessibility when the host is- 
sues an Inquiry Command. In other words, while the 
LOGIN is valid, any more repeated inquiry is not re- 
quired. Thus, specific embodiments employing such 
techniques can achieve strong LUN Security without 
sacrificing data transfer efficiency between the host 
computers and a storage subsystem. 
[0089] As described herein above, specific embodi- 
ments according to the present invention can realize 
highly reliable LUN Security, and can provide the host 
computers with efficient utilization of the storage re- 
sources in the storage subsystem and fast judgment 
logic to check the accessibility of the LUN. Such specific 
embodiments can insure that, for each port in the stor- 
age subsystem: at least one LU exists in the storage 
subsystem, a Virtual LUN created by arbitrarily renum- 
bering the actual LUN, and the WWN of the host com- 
puter whrch is likely to access the Virtual LUN. Further, 
no modification on the host computer side is required 
for the current operational procedures. 
[0090] in the representative example embodiments 
described herein above, the fiber channel has been em- 
ployed to provide a protocol between the host computer 
and the storage subsystem, however, fiber channel is 
not required to realize specif embodiments according 
to the present invention. Rather, any appltoable protocol 
environment providing substantially similar function can 
be used in various specific embodiments. Also, as for 
the storage subsystem, disk array subsystem Is mainly 
described in this example embodiment, however, the 
present Invention is also applicable to storage subsys- 
tem such as the optk:al disk library and the magnette 
tape library by replacing the storage media with remov- 
able ones. 

[0091] Next, yet further representative embodiments 
according to the present invention will be described be- 
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low. Specific embodiments according to the present in- 
vention can provide techniques for realizing the LUN Se- 
curity to the specific group comprising one or more host 
computers. The specific embodiments described herein 
below will be explained based upon the fiber channel as s 
an interface protocol between the host computers and 
a storage subsystem, however, such fiber channel in- 
terface is not required In these embodiments. 
[0092] In the environments shown in Fig. 1. Fig. 11, 
Fig. 13, and Fig. 16, having hubs, switches or other de- io 
vices for the fiber channel, the host computers made by 
various vendors are expected to access the same port 
of the storage subsystem. In the environment In which 
the host computers made by such various vendors co- 
exist, problenrrs can occur concerning sharing of the is 
storage resources In a storage subsystem. If the ven- 
dors are different, OS's installed on the host computers 
are often different. This condition often occurs if the host 
computers belong to work station (WS) or Mainframe 
type and the like. When the host computers are PC type, 20 
even if the vendors are different, because the OS's are 
In many cases Windows families, this condition occurs 
less frequently. 

[0093] When the OS's are different, the recording for- 
mats, the access logic, the executable scripts, and the 25 
applications for the storage resources are often differ- 
ent, as well. Therefore, it is difficult to share a volume 
among such host computers made by different vendors. 
[0094] Therefore, it is desirable to realize the LUN Se- 
curity function so that the accessibility to the storage re- 30 
source is defined for each group of host computers 
made by a particular vendor. Moreover, in specific em- 
bodiments which provide such an LUN Security, the 
storage subsystem can provide the host computer 
group pennitted to access with exclusive services or ^ 
specific functions in the storage resource. 
[0095] Therefore, in a specific embodiment, a repre- 
sentative example includes definitions to permit access 
to the LUs in the storage subsystem depending on the 
vendor of the host computers, for example. In some rep- 
resentative embodiments, the "LUN Access Manage- 
ment Table" can be defined to include vendor Informa- 
tion, or other grouping information. In specific embodi- 
ments, the vendor of a host computer can be recognized 
based upon the WWN,~for example. The 2201 in Fig: 22 
shows one of the formats for a WWN. As shown in this 
figure, representative WWN2201 is comprised of an 
Identifier Field 2202 defined by a bit area 60-63 (4-blt 
area), for example, a Company_ID 2203 defined by a 
bit area of 36-59 (24-bit area), for example, and a VSID so 
(Vendor Spedf Ic Identifier) 2204 defined by a bit area of 
0-35 (36-bit area), for example. 

[0096] In a specific embodiment, Company_ID 2203 
can be a global identity Information allocated by IEEE 
to uniquely identify each computer and communication ^5 
equipment vendor all over the worid. The VSID 2204 is 
the unique Identity information uniquely defined by the 
vendor and approved by IEEE to use the Company_ID 



2203. As any one may know this Company_ID of each 
vendor by checking the publications of IEEE, the stor- 
age subsystem can know the vendor of the host com- 
puter attempting a LOGIN to the storage subsystem, if 
the CompanyJD is known. 

[0097] Although several kinds of formats are specified 
for the WWN standard, the Company^lD 2203 and VSID 
(Vendor Specific Identifier) 2204 are commonly includ- 
ed. 

[0098] Fig. 23 illustrates a representative "LUN Ac- 
cess Management Table" 2301 in a particular embodi- 
ment according to the present invention. The "LUN Ac- 
cess Management Table" 2301 is defined for each port 
of the storage subsystem and comprises a LUN 2304 In 
the storage subsystem, a Virtual LUN 2303 created from 
the LUN by renumbering it by the user in the arbitrary 
schema, and a Company_ID 2302 of the host computer 
which is likely to access the Virtual LUN. Using this table 
2301 , users may link the Virtual LUN with any number 
of LUNs using any numbering schema. 
[0099] Accordingly, in the storage subsystem which 
defined this "LUN Access Management Table" 2301 , the 
LUN can be disclosed to the host computer made by 
each vendor in accordance with the users convenience. 
In this case, since the LUN access by the host computer 
of each vendor is not based upon the real LUN 2304 but 
the Virtual LUN 2303, it is not necessary to wonry about 
the fragmentation of the LUN values and existence of 
LUO. Thus, users may be provided with optimum and 
flexible LUN combination meeting their demands. Addi- 
tionally, the "WWN-SJD Conversion Table" can be built 
in the same way as shown in Fig. 18. using the similar 
formats shown in Fig. 19. 

[01 00] Fig. 24 shows representative processing flows 
of a particular embodiment according to the present in- 
vention, and Fig. 25 shows referencing relations of each 
table and the parameter used in the flow of this process- 
ing. At first, the user creates the "LUN Access Manage- 
ment Table" using the input unit 1 25 of the maintenance 
terminal unit 123 in step 2401. The LUN Access Man- 
agement Table describes relationships between the 
LUNs existing In the storage subsystem, the 
Company_ID, which identifies the vendor of host com- 
puters likely to access the LUN, and the Virtual LUN, 
which determines how the LUNs appear to the host 
computers likely to access the LUN. 
[0101] In a specific embodiment, this table is main- 
tained in the non volatile memory 1 1 9 In the storage sub- 
system, for example. In this table, the Virtual LUN, rather 
than the actual LUN, is disclosed to the host computer. 
The CompanyJD, which identifies each vendor, is al- 
ready known. One reason access is determined based 
upon the Company_ID, not the WWN, in the "LUN Ac- 
cess Management Table" of this embodiment Is that the 
accessibility of the LU should be decided not on a host 
computer basis but rather based upon the vendor of 
each host computer. 

[0102] In step 2402, when a host computer issues a 
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LOGIN to the storage subsystem, depending on the fib- 
er channel protocol, the storage subsystem fetches the 
N_Port_Name, called WWN hereinafter, and the S_tD 
from the PLOGI frame and creates a "WWN-S.ID Con- 
version Table" which contains the combination of them. 
This table can be stored in the non volatile memory 119. 
The storage subsystem does this for atl the PLOGI 
frames received. 

[0103] Next, in step 2403, the storage subsystem re- 
ceives the frame containing the Inquiry Command trans- 
ferred by the host computer in order to determine the 
status of the Logical Units in the storage subsystem. The 
storage subsystem which receives this frame extracts 
the SJD from the Frame Header and the LUN, which is 
a target of this command, from the Data Field. Then, the 
storage subsystem searches the "WWN-S_ID Conver- 
sion Table" for the WWN corresponding to this S_ID by 
using the S_ID as a search key. 

[0104] Next, in step 2404, the storage subsystem ex- 
tracts the Company_ID, comprising 24 bits in this spe- 
cific embodiment, from the obtained WWN based on the 
format 2201 in Fig. 22. The operation to extract this 
CompanyJD is specific to this particular embodiment, 
and it is thus not needed in other embodiments. Step 
2403, 2404 conrespond to 2501 -2504 in Fig. 25. 
[0105] Next, the storage subsystem searches the 
"LUN Access Management Table" using the obtained 
Company_ID as a search key and obtains a Virtual LUN 
corresponding to the LUN that is a target of the Inquiry 
Command. The reason for obtaining the LUN that is a 
target of the Inquiry Command as a Virtual LUN is that 
the Virtual LUN is disclosed to the host computer as the 
LUN in the storage subsystem. 

[01 06] Next, in step 2406, a judgment is made wheth- 
er the Virtual LUN corresponding to the WWN was ob- 
tained in step 2405 or not. If it was obtained, or the Vir- 
tual LUN corresponding to the WWN was found in the 
"LUN Access Management Table", the Virtual LUN is 
permitted to be accessed by the host computer. If it was 
not obtained, the host computer's access attempt of the 
Virtual LUN Is rejected. 

[0107] If the Virtual LUN is founci to be accessible by 
host computers made by the vendor as the result of step 
2406, the storage subsystem transfers the Inquiry Data 
In step 2407 with the status set to indicate that the in- 
quired LU is installed and the access is pemriitted as a 
response to the Inquiry Command issued by the host 
computer. These steps 2405, 2406, and 2407 conre- 
spond to 2505, 2506, and 2508 in Fig. 25. 
[0108] On the other hand, if the Virtual LUN is deter- 
mined to be inaccessible by host computers made by 
the vendor as the result of the step 2406, the storage 
subsystem transfers the Inquiry Data, in step 2408, with 
the status set to indicate that the inquired LU is not in- 
stalled and the access is rejected as a response to the 
Inquiry Command issued by the host computer. The 
host computer which received the Inquiry Data analyzes 
the frame. 



[0109] If the host computer made by the Vendor, 
found that the access to the Virtual LUN was permitted 
after the analysis of the frame, the host computer can 
issue commands (I/O Request) to the Virtual LUN con- 
5 tinuously. In this case, as shown in the step 2409, the 
storage subsystem can continue to receive commands 
from the host computer nnade by the vendor, without 
checking the accessibility of the Virtual LUN so long as 
the LOGIN from the host computer made by the vendor 
10 is valid. The LUN permitted to be accessed by the host 
computer made by the vendor is actually the LUN in the 
storage subsystem uniquely corresponding to the Virtu- 
al LUN which is pointed in the reference operation in 
step 2507 in Fig. 25. The reference operation in this step 
f5 2507 is the intemal reference work in the storage sub- 
system and the host computer does not need to worry 
about it. Otherwise, If the host computer made by the 
vendor recognized the LU access was rejected, it does 
not access to the LUN any more, so long as the LOGIN 
is valid. 

[01 10] In this embodiment, it is clear that the WWN of 
each host computer requesting access to the storage 
subsystem is not the object of the security. However, the 
vendor, that is, the group to which the host computer 
belongs is identified by obtaining the Company.lD com- 
prising the WWN and treating the vendor as the object 
of the security. 

[0111] This embodiment is explained in more detail 
with reference to Fig. 26 and Fig. 27. The "LUN Access 
Management Table" 2601 permits the host computer 
group 2605, having CompanyJD 0000E1 , to access the 
actual LUNs 0, 1 , 6, 8, and 15 through the Virtual LUNs 
0, 1, 2, 3, and 4. In the same way, Table 2601 permits 
the host computer group 2606, having Company_ID 
0000E2, to access the real LUNs 2, 7, and 10 through 
the Virtual LUNs 0, 1 , and 2. Further, Table 2601 pennits 
the host computer group 2607, having Company_ID 
OOOOFO, to access the real LUNs 3, 4, 5, and 1 4 through 
the Virtual LUNs 0, 1 , 3, and 4. 

[01 1 2] Fig. 27 illustrates this. Various host computers 
2703-2711 are connected to the single port of the stor- 
age subsystem 2701 via the fabric 2702 of fiber channel. 
Each of host computers 2703-271 1 has a WWN, unique 
in the world. However, the host connputers made by the 
same vendor have common Company_ID. The host 
computers 2703, 2704, 2705, and 2708 are made by the 
same vendor A and assumed to have Company_ID 
0000E1 . These host computers are permitted to access 
only the LUAO to LUA4 according to the security setting 
in the "LUN Access Management Table" 2701, even 
though these host computers belong to different do- 
mains from each other. 

[0113] In the same way, the host computers 2706, 
2707, and 2711 are made by the same vendor B, and 
have, for example, a Company_ID of 0000 E2. Then, 
these host computers are permitted to access only the 
LUBO to LUB2 in the storage subsystem 2701 according 
to the security setting in the table 2601, even though 
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these host computers belong to different domains from 
each other. Also, the host computers 2709 and 271 0 are 
made by the same vendor C and have, for example, 
Company_ID of OOOOFO. Then these host computers 
are pemnitted to access only the LUCO to LUC3 in the s 
storage subsystem 2701 according to the security set- 
ting in the table 2601 , even though these host comput- 
ers belong to different domains from each other. Among 
the different vendors of the host computers, a particular 
host computer blocked from accessing any LU pennlt- io 
ted to the other vendors because of the exclusive mech- 
anism based on the security setting in the Table 2601 . 
[01 1 4] The LUN Security for each vendor of the host 
computers can be realized as described herein above. 
In specific embodiments, techniques for providing LUN is 
Security can enable the storage subsystem to provide 
host computers of each vendor access to storage re- 
sources more efficiently. For example, because it Is 
clear that the LUAO to LUA4, LUBO to LUB2, and LUCO 
to LUC3 in 2712 are accessed by the different vendors 20 
respectively, the storage subsystem can provide host 
computers of each vendor permitted to access with ap- 
propriate storage format tailored to the OS operating in 
the host computer of each vendor. Also, the storage sub- 
system can provide OS of the host computers of each 25 
vendor with the specifically tailored executive scripts, 
application software, and service operations. Moreover, 
the storage subsystem 2701 may be individually cus- 
tomized by providing each vendor with the control infor- 
mation of Its own. ^0 
[0115] As described herein above, specific embodi- 
ments can achieve highly reliable LUN Security, which 
can provide the host computers with efficient utilization . 
of the storage resources in the storage subsystem. Spe- 
cific embodiments can comprise fast Judgment logic to 35 
check the accessibility of the specified LUN, with tittle 
or no modification needed in the processing in the host 
computers by Insuring that, for each port In the storage 
subsystem, an actual LU exists In the storage subsys- 
tem, a Virtual LUN created by redefining to the LU using 
arbitrary numbering, and a Company_ID of the vendor 
of the host computer which is likely to access the Virtual 
LUN are provided. 

[01 1 6] In this example embodiment, the fiber channel 
was used as an example interface protocol between one 
or more host computers and a storage subsystem, how- 
ever it is not required. In fact, embodiments according 
to the present invention can employ any protocol envi- 
ronment providing substantially similar functionality. Al- 
so, the present invention has been described with ref- so 
erence to example embodiments employing disk arrays 
as the storage subsystem, however, the present inven- 
tion Is applicable to other types of storage subsystems, 
such as optical disk library, and a magnetic tape library 
by replacing the disk storage with appropriate media, ss 
Moreover, grouping of the host computers was de- 
scribed on the basis of grouping by vendor of the host 
computers, however, the grouping can be done on the ' 



basis of any information sharable among two or more 
host computers. 

CONCLUSION 

[0117] Although the above has generally described 
the present invention according to specific systems, the 
present invention has a much broader range of applica- 
bility. In particular, while foregoing has described a spe- 
cific embodiments having a fiber channel as an Interface 
protocol between a storage subsystem and host com- 
puters, and the SCSI command set as a command in- 
terface operational under the interface protocol, as ex- 
amples. However, the application of the present inven- 
tion is not limited to the combination of the fiber channel 
and SCSI command set Any protocol whteh provides 
similar function and structure of LOGIf^; Inquiry, and the 
tike may be used in various specific embodiments ac- 
cording to the present Invention. 
[0118] The specific embodiments described herein 
are Intended to be merely illustrative and not limiting of 
the many embodiments, variations, modifications, and 
alternatives achievable by one of ordinary skill In the art. 
Further, the diagrams used herein are merely illustra- 
tions and should not limit the scope of the claims herein. 
One of ordinary skill in the art would recognize other var- 
iations, modifications, and alternatives. Thus, it is in- 
tended that the foregoing description be given the 
broadest possible construction and be limited only by 
the following claims. 



Claims 

1. A method for controlling access to a logical unit in 
a computer storage subsystem, said method com- 
prising: 

creating at said computer storage subsystem a 
first mapping, being between a logical unit iden- 
tifier, a virtual unit Identifier and a uniquely as- 
signed host identifier; 

creating at said computer storage subsystem a 
second mapping, being between a dynamically 
assigned host identifier and said uniquely as- 
signed host identifier; 

receiving at said computer storage subsystem 
an inquiry request for at least one virtual logical 
unit In said computer storage subsystem, said 
request comprising at least a dynamically as- 
signed host identifier corresponding to an issu- 
er of said inquiry request, and a requested vir- 
tual unit Identifier; 

searching said second mapping using said dy- 
namically assigned host Identifier to obtain a 
corresponding uniquely assigned host identifi- 
er; 

searching said first mapping using said corre- 
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spending uniquely assigned host identifier; 
determining whether access by said issuer of 
said inquiry request, to a logical unit corre- 
sponding to said requested virtual unit identifi- 
er, is pemntssible based upon whether a relation s 
between said corresponding uniquely assigned 
host identifier to said requested virtual unit 
identifier exists in said first mapping; 
if said access is permissible, then establishing 
accessibility between said logical unit corre- 
spending to said requested virtual unit identifier 
and said issuer, said logical unit determined 
from a relation between said requested virtual 
unit identifier and a con^esponding logical unit 
identifier determined from said first mapping; ^5 
and reporting whether said access is permissi- 
ble to said issuer of said inquiry request. 

2. The method of claim 1 wherein said corresponding 
uniquely assigned host identifier further comprises 20 
a world wide name (WWN). 

3. The method of claim 1 wherein said dynamically as- 
signed host identifier further comprises a source 
identifier (S_ID). 25 

4. The method of claim 1 further conr^rising: 

receiving at said computer storage subsystem 
at least one of a plurality of requests to access 30 
said requested virtual unit from said issuer; and 
responsive to each of said requests, permitting 
said issuer to access said logical unit corre- 
sponding to said requested virtual unit identifier 
if said determining whether said access is per- ^ 
mtssible step so determines. 

5. The method of claim 1 wherein said receiving at 
said computer storage subsystem an inquiry re- 
quest further comprises: ^ 

receiving an Inquiry Command from a host 
computer. 

6. The method of claim 1 wherein said uniquely as- 
signed host identifier further comprises: 

an identifier assigned based upon a vendor of 
said issuer. 

7. The method of claim 6 further comprising: 

extracting a company identifier from said so 
uniquely assigned host identifier. 

8. The method of claim 7 wherein said searching said 
first mapping using said corresponding uniquely as- 
signed host identifier further comprises: 

searching said first mapping using said com- 
pany identifier. 
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9. The method of claim 8 wherein said detemriining 
whether access to a logical unit corresponding to 
said requested virtual unit identifier by said issuer 
of said inquiry request is permissible based upon 
whether a relation between said corresponding 
uniquely assigned host identifier to said requested 
virtual unit identifier exists in said first mapping fur- 
ther comprises: 

said detemnining whether access to a logical 
unit corresponding to said requested virtual unit 
identifier by said Issuer of said Inquiry request is 
permissible based upon whether a relation between 
said corresponding company identifier to said re- 
quested virtual unit identifier exists in said first map- 
ping. 

10. The method of claim 1 wherein said second map- 
ping further comprises: 

at least one of a plurality of relations between 
at least one S ID and at least one world wide name 
(WWN). 

11. A storage subsystem comprising: 

at least one of a plurality of storage units, each 
comprising at least one of a plurality of logical 
units; 

a memory unit; and 

a storage control unit; wherein said storage 
control unit manages a first mapping In said 
memory unit, said first mapping being between 
a logical unit identifier for each of said plurality 
of logical units, a virtual unit identifier and a 
uniquely assigned host identifier; and 
wherein said storage control unit manages a 
second mapping in said memory unit, said sec- 
ond mapping being between a dynamically as- 
signed host identifier and said uniquely as- 
signed host identifier; and 
said storage control unit detennines whether 
access to a logical unit, corresponding to a re- 
quested virtual unit identifier, is pennissible 
based upon: 

(1) whether a relation between a dynami- 
cally assigned host identifier of said re- 
questor, (SID) to a corresponding uniquely 
assigned host Identifier (WWN) exists in 
said second mapping; and if so, 

(2) whether a relation between said corre- 
sponding uniquely assigned host identifier 
(WWN) to said requested virtual unit iden- 
tifier (VUN) exists in said first mapping. 

12. A storage subsystem comprising: 

at least one of a plurality of storage units, each 
having a storage area divisible into at least one 
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of a plurality of logical units, 
a storage control unit to control read/write op- 
eration fromAo said storage units, 
a memory unit to maintain a plurality of man- 
agement information, s 
wherein, said management information com- 
prises at least one of a plurality of relationships 
among: 

(a) information to identify a host computer, io 

(b) an identifier corresponding to each of 
said plurality of logical units, said identifier 
for determining whether said logical unit is 
accessible by said host computer, and 

(c) a virtual identifier corresponding to said is 
identifier of said logical unit; and wherein 
said storage subsystem determines 
whether an access by a host computer may 

be permitted by referring to said manage- 
ment information using said identity infer- 20 
mation of said host computer as a refer- 
ence key. 

1 3. The storage subsystem recited in claim 1 2, wherein 
correspondence of said virtual identifier to said 25 
identifier of said logical unit may be arbitrarily de- 
fined. 

14. The storage subsystem recited in claim 13, com- 
prising at least two logical units, wherein a common 30 
virtual identifier may be defined corresponding to at 
least two of said logical units. 

15. A storage subsystem comprising: 

35 

at least one of a plurality of storage units, stor- 
age areas of which are divided into at least one 
of a plurality of logical units; 
a control unit to control read/write operation 
from/to said storage units; 
a first management table defining the linl<age 
among 

a specific information included in a yvWN, 
comprising information to identify the host 
computers, 

an identity number LUN of said logical unit, 
and 

a virtual LUN corresponding to said LUN; 

and a second management table defining 

a linkage between, 

said WWN and 

an identity number S_ID; and 

a memory unit to store said first and second ss 
management tables. 

16. The storage subsystem of claim 1 5. capable of con-- 



necting to a maintenance terminal unit. 

17. The storage subsystem recited in claim 1 6, wherein 
the first management table defines the linkage 
among 

said WWN, 

said LUN accessible by a host computer having 
said WWN, and 

said virtual LUN corresponding to said LUN; 
wherein 

said storage subsystem detenmines whether an 
access to said LUN by a host computer having 
a specific S_ID is pemnitted, by obtaining said 
WWN from the second management table us- 
ing said S_tD as a search key, and searching 
said first management table for said LUN using 
said WWN as a search key. 

18. The storage subsystem recited in claim 15 or 17, 
wherein the correspondence between said LUN 
and said virtual LUN may be defined arbitrarily. 

19. The storage subsystem recited in claim 18, further 
comprising at least two LUNs, wherein when mak- 
ing the linkage between said LUN and said virtual 
LUN, a common Virtual LUN may be defined corre- 
sponding to at least two of said LUNs. 

20. The storage subsystem recited in claim 1 5, wherein 
said specific information comprises a Company_ID 
to identify the vendor of said host computers. 

21 . A computer system comprising: 

at least one of a plurality of host computers; 
at least one storage subsystem, said storage 
subsystem comprising at least one of a plurality 
of logical units; 

a data channel interconnecting said plurality of 
host computers with said storage subsystem; 
wherein 

at least one of said plurality of host computers 
requests availability of at least one logical unit 
In said storage subsystem, said request com- 
prising an identity information corresponding to 
said at least one of a plurality of host comput- 
ers, and a virtual logical unit identifier of said 
logical unit, availability of whtoh Is being re- 
quested; and wherein 

said storage subsystem determines whether 
said at least one of a plurality of host computers 
may pemnissibly access said at least one logi- 
cal unit based upon said virtual logical unit iden- 
tifier and said identity information from said re- 
quest. 

22. The computer system of claim 21 wherein said Iden- 
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tity Information con-esponding to said at least one 
of a plurality of host computers further comprises a 
dynamically assignable identifier, and wherein said 
storage subsystem: 

determines a unique identifier for said at least 
one of a plurality of host computers from said 
Identity information in said request; and 
determines whether said at least one of a plu- 
rality of host computers may permissibly ac- 
cess said at least one logical unit based upon 
said virtual logical unit identifier and said 
unique identifier. 

23. The computer system of claim 22 wherein said 
unique identifier further comprises a world wide 
name (WWN). 

24. The computer system of claim 22 wherein said dy- 
namically assignable identifier further comprises a 
system identifier (S_ID). 

25. The computer system of claim 21 wherein said stor- 
age subsystem determines said availability based 
upon at least one of a plurality of relations. 

26. The computer system of claim 25 wherein said at 
least one of a plurality of relations further comprises 
a table. 

27. Thecomputersystemofclalm21 wherein said data 
channel further comprises a fiber channel. 

28. A data object stored in a memory unit within a stor- 
age apparatus, said data object comprising: 

a machine specific identifier corresponding to 
at least one of a plurality of host computers; 
a logical unit identifier corresponding to at least 
one of a plurality of logical units; and 
a virtual logical unit identifier; wherein said vir- 
tual logical unit identifier can correspond to at 
least one of a plurality of logical units according 
to an arbrtrarily^ssigned scherna; 

wherein access to a logical unit within said 
storage apparatus by a requesting host computer 
is requested by specifying a virtual logical unit iden- 
tifier, and wherein access permission for said re- 
questing host computer is determined according to 
whether a relation between a machine specific iden- 
tif ierfor said requesting host computer, a virtual unit 
identifier specified, and a logical unit identifier exists 
within said data object. 

29. The data object of claim 29 wherein 

a particular virtual logical unit identifier corre- 
sponds to more than one logical unit identifiers. 



30. The data object of claim 29 wherein 

more than one virtual logical unit identifiers 
correspond to a particular logical unit identifier. 

5 31 . The data object of claim 29 wherein 

a total number of virtual logical unit identifiers 
is not equal to a total number of logical unit identi- 
fiers. 
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(EX.:OOh/Direct Access 
Device) 



When the specified LUN 705 
is not installed 



Inquiry Data (FCP_DATA) 

- QualifierOOIb or011b 
(Status of the Logical Unit) 

• Device Type 
(IFh/Undefined or Not 
Connected Device) 
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START 



The "LUN Access Management Table " that links the WWN 
assigned to the host computer, the LUH in the storage sub- 
system and the Virtual LUN corresponding to the LUN is created 
in advance and stored in the storage subsystem. 



801 



The "WWN-SJD Conversion Table" that links the WWN 
assigned to the host computer and the SJD dynamically and 
uniquely assigned is created and stored in the storage 
subsystem. 



802 
1^ 



When receiving the Inquiry Command issued by a host computer 
to a specific LU in the storage subsystem, the SJD is obtained 
from the Command Data and the ''WWN-SJD Conversion 
Table" is searched for the WWN using the SJD as a key. 



803 



Next, the Virtual LUN corresponding to the WWN which was 
searched from the "LUN Access Management Table" . 
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805 



is the Virtual LUN concerned 
found in the ''LUN Access 
Management Table" 

l^.^-"^^ 806 



N 



Responds to the host 
computer that the LU con- 
cerned is accessible. 



807 



Responds to said host 
computer that the speci- 
fied LU is not accessible. 



Thereafter, while the PLOGI is valid, the 
command from the host computer to the 
LU concerned is accessible. 
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1304 Host computer C 
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FIG.14 



1402 
1403 
1404 
14^ 

1406 



1415 


1401 

/ 


1417 


WWN 


Virtual LUN 


LUN 


01234567 89ABCDEF 


0 12 3 


0 12 3 


.01234567 89ABCDEE 


0 1 


4 5 


,01234567 89ABCDED 


0 1 


6 7 


,01234567 89ABCDEC 


0 8 16 24 


9 10 11 12 








01234567 89ABCDCC 


16 


20 









1407 
1408 

1409 

1410 
1411^ 

1412 
1413 

1414 



1 






01234567 89ABCDBB 


0 13 5 7 


30 31 32 33 34 


,01234567 89ABCDAA 


0 2 4 6 


35 36 37 38 








,01234567 89ABCD10 


4 


39 








01234567 89ABCD2E 


0 1 2 3 4 5 


1011 12 13 14 15 


,01234567 89ABCD2F 


0 1 2 3 4 5 


1011 12 13 14 15 








,01234567 89ABCD31 


0 1 2 3 4 5 6 7 


8 9 10 11 12 13 14 15 


,01234567 89ABCD32 


8 9 1011 12 13 1415 


8 910 11 12 13 14 15 








,01234567 89ABCD4E 


0 12 3 


4 8 12 16 



28 



EP1 117 028 A2 



1502 



1505 
1506 
1507 




1503 



'1504 



WWN 


Virtual LUN 


LUN 


. 01234567 89ABCDCC 


0 12 3 4 


0 1 6 8 15 


.01234567 89ABCDC0 


0 12 


2 7 10 


01234567 89ABCDC1 


0 12 3 


3 4 5 14 









FIG.16 



Host computer A 
1602 



Host computer B 
1603 




29 



EP 1 117 028 A2 



FIG.17 



[ START J 



Is the security setting finished for 



^"-^^•..^^^all ports in the storage subsystem 

thai need it ^^^^^"'^'^'''''^ 


For all host computers that need security 
control to the LUM under the port concerned, 
the WWN (Port_Name:known) is registered 
in the "LUN Access Management Table 
, and the LU to be assigned to the NAAA/N is 
defined combining it \yith the Virtual LUNs. 












1703 


The created "LUN Access Management 
Table" is stored in the non volatile memory. 





END 
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FIG.18 



START 



A PLOGI frame is received 
from a host computer. 



The SJD is obtained from the 
PLOGI Frame Header. 



The WWN is obtained from the 
PLOGI Data Field. 



The "WWN-S JD Conversion Table" 
which shows the correspondence of 
the\A/WNandS ID is created. 



1 



The created "WWN-SJD 
Conversion Table" is stored in 
the non volatile memory. 



An ACC frame is transferred 
to the host computer. 



[ END ] 
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FIG.20A 



START 
\ 



The FCP_CMND is received 
from a host computer 

I 



The contents of the 
FCP CMND is checked. 



2001 



2002 




2004 



The Command 
concerned is 
executed. 



The SJD is obtained from the 
FCP CMND Frame Header. 



2005 



The requested LUN is obtained 
from the FCP_LUN in the 
FCP CMND Data field. 



I 



The "\/VWN-SJD Conversion 
Table" in the non volatile memory 
Is searched for the WWN using 
the S_ID as a key. 



The information on the Virtual 
LUN to which said \A/WN is 
permitted to access is obtained 
from the WWN Access Man- 
agement Table" stored In the 
non volatile memory 
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2008 
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FIG.20B 




N 



The followings are set in the 
Inquiry Data to inform the 
host computer of them. 

(1) Qualifier = 000b. 

(2) Device Type = the Device 

Type concerned. 



2011 



The followings are set in the 
Inquiry Data to inform the 
host computer of them. 

(1) Qualifier = 001 b (01 lb). 

(2) Device Type = 1Fh. 



The Inquiry Data is stored in the 
FCP_DATA frame and is trans- 
ferred to the host computer. 



2012 



The FCP_RSP frame is trans- 
ferred to the host computer. 



2013 
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"WWN-S ID Conversion Table" 
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using the S_ID as a key 
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"LUN Access Management Table" 



Searches for the Virtual LUN 
using the WWN as a key 
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FCP_DATA(lnquify data) 
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FIG.24 

Q START ^ 



The "LUN Access Management Table" that links a common Company_ID 
which is common to the host computers made by the same vendor, the 
LUN in the storage subsystem, and the virtual LUN corresponding to the 
LUN, is created in advance and stored in the storage subsystem. 



I 



2401 



When the PLOGI issued by the host computer is received, the "WWN- 
SJD Conversion Table" that links the WWN assigned to the host 
computer and the dynamically assigned SJD. is created and stored in 
the storage subsystem. 



I 



2402 



When receiving the inquiry Command issued by the host computer to 
a specific Lu in the storage subsystem, the SJD is obtain from the 
Command, the "WWN-SJD Conversion Table" is searched for the WWNI-sj' 
using the S_ID as key. 



2403 



The Company_ID is extracted from the searched WWN. 



2404 



The Virtual LU is obtained from the "LUN Access Management Table** 
using the extracted CompanyJD as a search key. 



2405 



2406 




2409 



Responds to the host 
computer that the specified 
LU is accessible 

I 



Responds to the host 
computer that the specified 
LU is not accessible 



Thereafter white the PLOGI is valid, the specified LU can 
access commands from the host computer. 
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FIG.25 
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